$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa File: 10a855de-2f56-30f4-b7d6-ad843411b4b9.roa (raw, json) Hash identifier: //Eq3+9kCFliq5kLfPlc1bWJmRNDdRwHBOMncZPeMR4= Subject key identifier: 19:23:14:B6:53:44:97:F6:36:A7:45:81:B4:B5:94:DA:2E:6E:F7:86 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA93753A305F201F8EC440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:93:75:3a:30:5f:20:1f:8e:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d27d244-d953-4699-8f97-c9afe4d6e381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:3f:1b:df:e3:cf:77:45:2a:e6:e0:dd:4b: e5:4f:79:d9:e2:43:e3:8a:28:da:44:17:94:af:42: 2a:3d:b9:37:68:fa:c8:c9:18:a3:d8:7c:12:99:d3: 80:19:9d:79:be:b1:4f:6c:1a:9c:ea:9e:bd:4d:b7: 4a:a1:db:a4:2d:86:6a:ce:c9:35:61:90:d3:4c:25: b8:20:20:d3:c9:1d:3e:2a:36:38:74:01:9b:36:fa: 98:52:a1:fd:d7:88:de:f3:1a:8e:b4:02:13:d4:7a: 29:70:68:74:3d:c1:31:ff:8e:8f:85:2d:30:16:7d: 1e:7e:18:8d:af:a6:09:6e:48:68:89:5f:ff:1a:ed: 75:5f:10:7c:15:91:fa:e9:ff:dd:fb:a9:1a:65:6e: ea:84:ea:32:5b:fe:ef:46:e4:34:6c:6d:ef:f9:12: b9:38:3f:cc:79:85:a4:7b:07:23:3c:cd:77:81:59: 39:d6:67:34:12:aa:79:70:e0:03:f8:92:18:25:bd: 38:d0:6f:9f:02:6a:be:99:fe:99:62:da:20:b7:17: 28:ac:c6:73:d4:c1:52:c0:61:06:8a:a9:95:6b:8f: 5e:a5:ce:91:c9:46:8c:1d:ab:1a:54:4e:c6:05:a7: ab:a6:bd:62:cc:f0:e5:f5:08:03:fa:52:fd:08:02: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:23:14:B6:53:44:97:F6:36:A7:45:81:B4:B5:94:DA:2E:6E:F7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c7:73:00:7c:e4:04:a5:2f:ce:3f:7e:7c:ce:43:cc:6f:8c: 6f:c8:59:54:a6:0c:86:c2:67:05:e1:3a:97:79:92:18:ce:93: ce:69:c8:48:06:7d:47:2c:f8:be:4e:95:6c:64:34:11:94:e8: 22:b4:8b:7b:61:b8:ff:46:02:99:97:e3:f7:63:90:e8:8d:3b: 0b:9b:4a:eb:8e:12:bb:cd:d6:bc:99:0f:b9:05:15:ce:ad:92: ad:4b:6a:cb:1d:1e:3f:2f:47:cd:9d:93:61:78:e4:51:cf:c4: 7b:a6:1c:78:7f:b0:87:6a:d9:da:0c:19:b1:60:70:1f:f0:41: 6a:9b:d7:09:bc:68:b0:d2:8b:4b:5e:94:d1:29:df:89:55:68: f5:1e:00:e1:84:a6:ec:6b:0d:08:a3:a4:05:f9:9e:ea:0a:58: fe:1c:71:33:13:d4:10:ba:b0:46:de:ab:1c:72:92:38:8d:fb: 04:e8:cb:8f:65:43:64:9f:71:4a:9f:d3:af:3d:59:69:1f:17: f5:93:75:58:b4:9c:cd:14:9f:ea:40:f6:a3:6a:ec:a9:bf:04: 72:85:68:bd:5f:89:1c:ed:46:1e:c7:3e:01:53:0d:9f:3e:a0: 6d:fb:dc:d4:20:ba:5c:78:ba:a2:37:e6:e8:c3:ce:b8:e3:c8: 4a:24:f6:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupN1OjBfIB+OxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2QyN2QyNDQtZDk1My00Njk5LThmOTctYzlhZmU0ZDZlMzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXE/G9/jz3dFKubg3UvlT3nZ4kPjiijaRBeU r0IqPbk3aPrIyRij2HwSmdOAGZ15vrFPbBqc6p69TbdKodukLYZqzsk1YZDTTCW4 ICDTyR0+KjY4dAGbNvqYUqH914je8xqOtAIT1HopcGh0PcEx/46PhS0wFn0efhiN r6YJbkhoiV//Gu11XxB8FZH66f/d+6kaZW7qhOoyW/7vRuQ0bG3v+RK5OD/MeYWk ewcjPM13gVk51mc0Eqp5cOAD+JIYJb040G+fAmq+mf6ZYtogtxcorMZz1MFSwGEG iqmVa49epc6RyUaMHasaVE7GBaerpr1izPDl9QgD+lL9CAJRMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkjFLZTRJf2NqdFgbS1lNoubveGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTBhODU1ZGUtMmY1Ni0z MGY0LWI3ZDYtYWQ4NDM0MTFiNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7HcwB85ASlL84/fnzOQ8xvjG/IWVSmDIbCZwXhOpd5khjOk85pyEgG fUcs+L5OlWxkNBGU6CK0i3thuP9GApmX4/djkOiNOwubSuuOErvN1ryZD7kFFc6t kq1LassdHj8vR82dk2F45FHPxHumHHh/sIdq2doMGbFgcB/wQWqb1wm8aLDSi0te lNEp34lVaPUeAOGEpuxrDQijpAX5nuoKWP4ccTMT1BC6sEbeqxxykjiN+wToy49l Q2SfcUqf0689WWkfF/WTdVi0nM0Un+pA9qNq7Km/BHKFaL1fiRztRh7HPgFTDZ8+ oG373NQgulx4uqI35ujDzrjjyEok9uc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:14 2025 by rpki-client